Description Potential use of sensitive information in GET requests in Checkmk GmbH's Checkmk versions <2.4.0p13, <2.3.0p38, <2.2.0p46, and 2.1.0 (EOL) may cause sensitive form data to be included in URL query parameters, which may be logged in various places such as browser history or web server logs.
A vulnerability in Checkmk versions prior to 2.4.0p13, prior to 2.3.0p38, prior to 2.2.0p46, and 2.1.0 (EOL) may lead to the unintentional inclusion of sensitive form data, such as passwords, in URL query parameters. This information could be logged in various locations, including web server logs and browser history. The issue arises when users navigate pages after encountering validation errors, potentially exposing recently entered secrets without affecting stored data.
Users can upgrade to Checkmk versions 2.4.0p13, 2.3.0p38, or 2.2.0p46 to address this vulnerability. Instructions for downloading the latest version can be found on the Checkmk website.
Show AI summary Metrics CVSS Version 4.0 CVSS Version 3.x CVSS Version 2.0 SSVC
CVSS 4.0 Severity and Vector Strings:
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
CISA-ADP
Assessed Oct 9, 2025 Exploitation: NoneAutomatable: NoTechnical Impact: Partial
References to Advisories, Solutions, and Tools By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
Weakness Enumeration Affected Products Product Versions checkmk checkmk >= 2.1.0, < 2.2.0
2.2.0 -
2.2.0 p1
2.2.0 p10
2.2.0 p11
2.2.0 p12
2.2.0 p13
2.2.0 p14
2.2.0 p16
2.2.0 p17
2.2.0 p18
2.2.0 p19
2.2.0 p21
2.2.0 p22
2.2.0 p23
2.2.0 p24
2.2.0 p25
2.2.0 p26
2.2.0 p27
2.2.0 p28
2.2.0 p29
2.2.0 p3
2.2.0 p30
2.2.0 p31
2.2.0 p32
2.2.0 p33
2.2.0 p34
2.2.0 p35
2.2.0 p36
2.2.0 p37
2.2.0 p38
2.2.0 p39
2.2.0 p4
2.2.0 p40
2.2.0 p41
2.2.0 p42
2.2.0 p43
2.2.0 p44
2.2.0 p45
2.2.0 p5
2.2.0 p6
2.2.0 p7
2.2.0 p8
2.2.0 p9
2.3.0 -
2.3.0 p1
2.3.0 p10
2.3.0 p11
2.3.0 p12
2.3.0 p13
2.3.0 p14
2.3.0 p15
2.3.0 p16
2.3.0 p17
2.3.0 p18
2.3.0 p19
2.3.0 p2
2.3.0 p20
2.3.0 p21
2.3.0 p22
2.3.0 p23
2.3.0 p24
2.3.0 p25
2.3.0 p26
2.3.0 p27
2.3.0 p28
2.3.0 p29
2.3.0 p3
2.3.0 p30
2.3.0 p31
2.3.0 p32
2.3.0 p33
2.3.0 p34
2.3.0 p35
2.3.0 p36
2.3.0 p37
2.3.0 p4
2.3.0 p5
2.3.0 p6
2.3.0 p7
2.3.0 p8
2.3.0 p9
2.4.0 -
2.4.0 p1
2.4.0 p10
2.4.0 p11
2.4.0 p12
2.4.0 p2
2.4.0 p3
2.4.0 p4
2.4.0 p5
2.4.0 p6
2.4.0 p7
2.4.0 p8
2.4.0 p9
Viewing 5 of 95 versions. View all CPE cpe:2.3:a:checkmk:checkmk:*:*:*:*:*:*:*:* cpe:2.3:a:checkmk:checkmk:2.2.0:-:*:*:*:*:*:* cpe:2.3:a:checkmk:checkmk:2.2.0:p1:*:*:*:*:*:* cpe:2.3:a:checkmk:checkmk:2.2.0:p10:*:*:*:*:*:* cpe:2.3:a:checkmk:checkmk:2.2.0:p11:*:*:*:*:*:* cpe:2.3:a:checkmk:checkmk:2.2.0:p12:*:*:*:*:*:* cpe:2.3:a:checkmk:checkmk:2.2.0:p13:*:*:*:*:*:* cpe:2.3:a:checkmk:checkmk:2.2.0:p14:*:*:*:*:*:* cpe:2.3:a:checkmk:checkmk:2.2.0:p16:*:*:*:*:*:* cpe:2.3:a:checkmk:checkmk:2.2.0:p17:*:*:*:*:*:* cpe:2.3:a:checkmk:checkmk:2.2.0:p18:*:*:*:*:*:* cpe:2.3:a:checkmk:checkmk:2.2.0:p19:*:*:*:*:*:* cpe:2.3:a:checkmk:checkmk:2.2.0:p21:*:*:*:*:*:* cpe:2.3:a:checkmk:checkmk:2.2.0:p22:*:*:*:*:*:* cpe:2.3:a:checkmk:checkmk:2.2.0:p23:*:*:*:*:*:* cpe:2.3:a:checkmk:checkmk:2.2.0:p24:*:*:*:*:*:* cpe:2.3:a:checkmk:checkmk:2.2.0:p25:*:*:*:*:*:* cpe:2.3:a:checkmk:checkmk:2.2.0:p26:*:*:*:*:*:* cpe:2.3:a:checkmk:checkmk:2.2.0:p27:*:*:*:*:*:* cpe:2.3:a:checkmk:checkmk:2.2.0:p28:*:*:*:*:*:* cpe:2.3:a:checkmk:checkmk:2.2.0:p29:*:*:*:*:*:* cpe:2.3:a:checkmk:checkmk:2.2.0:p3:*:*:*:*:*:* cpe:2.3:a:checkmk:checkmk:2.2.0:p30:*:*:*:*:*:* cpe:2.3:a:checkmk:checkmk:2.2.0:p31:*:*:*:*:*:* cpe:2.3:a:checkmk:checkmk:2.2.0:p32:*:*:*:*:*:* cpe:2.3:a:checkmk:checkmk:2.2.0:p33:*:*:*:*:*:* cpe:2.3:a:checkmk:checkmk:2.2.0:p34:*:*:*:*:*:* cpe:2.3:a:checkmk:checkmk:2.2.0:p35:*:*:*:*:*:* cpe:2.3:a:checkmk:checkmk:2.2.0:p36:*:*:*:*:*:* cpe:2.3:a:checkmk:checkmk:2.2.0:p37:*:*:*:*:*:* cpe:2.3:a:checkmk:checkmk:2.2.0:p38:*:*:*:*:*:* cpe:2.3:a:checkmk:checkmk:2.2.0:p39:*:*:*:*:*:* cpe:2.3:a:checkmk:checkmk:2.2.0:p4:*:*:*:*:*:* cpe:2.3:a:checkmk:checkmk:2.2.0:p40:*:*:*:*:*:* cpe:2.3:a:checkmk:checkmk:2.2.0:p41:*:*:*:*:*:* cpe:2.3:a:checkmk:checkmk:2.2.0:p42:*:*:*:*:*:* cpe:2.3:a:checkmk:checkmk:2.2.0:p43:*:*:*:*:*:* cpe:2.3:a:checkmk:checkmk:2.2.0:p44:*:*:*:*:*:* cpe:2.3:a:checkmk:checkmk:2.2.0:p45:*:*:*:*:*:* cpe:2.3:a:checkmk:checkmk:2.2.0:p5:*:*:*:*:*:* cpe:2.3:a:checkmk:checkmk:2.2.0:p6:*:*:*:*:*:* cpe:2.3:a:checkmk:checkmk:2.2.0:p7:*:*:*:*:*:* cpe:2.3:a:checkmk:checkmk:2.2.0:p8:*:*:*:*:*:* cpe:2.3:a:checkmk:checkmk:2.2.0:p9:*:*:*:*:*:* cpe:2.3:a:checkmk:checkmk:2.3.0:-:*:*:*:*:*:* cpe:2.3:a:checkmk:checkmk:2.3.0:p1:*:*:*:*:*:* cpe:2.3:a:checkmk:checkmk:2.3.0:p10:*:*:*:*:*:* cpe:2.3:a:checkmk:checkmk:2.3.0:p11:*:*:*:*:*:* cpe:2.3:a:checkmk:checkmk:2.3.0:p12:*:*:*:*:*:* cpe:2.3:a:checkmk:checkmk:2.3.0:p13:*:*:*:*:*:* cpe:2.3:a:checkmk:checkmk:2.3.0:p14:*:*:*:*:*:* cpe:2.3:a:checkmk:checkmk:2.3.0:p15:*:*:*:*:*:* cpe:2.3:a:checkmk:checkmk:2.3.0:p16:*:*:*:*:*:* cpe:2.3:a:checkmk:checkmk:2.3.0:p17:*:*:*:*:*:* cpe:2.3:a:checkmk:checkmk:2.3.0:p18:*:*:*:*:*:* cpe:2.3:a:checkmk:checkmk:2.3.0:p19:*:*:*:*:*:* cpe:2.3:a:checkmk:checkmk:2.3.0:p2:*:*:*:*:*:* cpe:2.3:a:checkmk:checkmk:2.3.0:p20:*:*:*:*:*:* cpe:2.3:a:checkmk:checkmk:2.3.0:p21:*:*:*:*:*:* cpe:2.3:a:checkmk:checkmk:2.3.0:p22:*:*:*:*:*:* cpe:2.3:a:checkmk:checkmk:2.3.0:p23:*:*:*:*:*:* cpe:2.3:a:checkmk:checkmk:2.3.0:p24:*:*:*:*:*:* cpe:2.3:a:checkmk:checkmk:2.3.0:p25:*:*:*:*:*:* cpe:2.3:a:checkmk:checkmk:2.3.0:p26:*:*:*:*:*:* cpe:2.3:a:checkmk:checkmk:2.3.0:p27:*:*:*:*:*:* cpe:2.3:a:checkmk:checkmk:2.3.0:p28:*:*:*:*:*:* cpe:2.3:a:checkmk:checkmk:2.3.0:p29:*:*:*:*:*:* cpe:2.3:a:checkmk:checkmk:2.3.0:p3:*:*:*:*:*:* cpe:2.3:a:checkmk:checkmk:2.3.0:p30:*:*:*:*:*:* cpe:2.3:a:checkmk:checkmk:2.3.0:p31:*:*:*:*:*:* cpe:2.3:a:checkmk:checkmk:2.3.0:p32:*:*:*:*:*:* cpe:2.3:a:checkmk:checkmk:2.3.0:p33:*:*:*:*:*:* cpe:2.3:a:checkmk:checkmk:2.3.0:p34:*:*:*:*:*:* cpe:2.3:a:checkmk:checkmk:2.3.0:p35:*:*:*:*:*:* cpe:2.3:a:checkmk:checkmk:2.3.0:p36:*:*:*:*:*:* cpe:2.3:a:checkmk:checkmk:2.3.0:p37:*:*:*:*:*:* cpe:2.3:a:checkmk:checkmk:2.3.0:p4:*:*:*:*:*:* cpe:2.3:a:checkmk:checkmk:2.3.0:p5:*:*:*:*:*:* cpe:2.3:a:checkmk:checkmk:2.3.0:p6:*:*:*:*:*:* cpe:2.3:a:checkmk:checkmk:2.3.0:p7:*:*:*:*:*:* cpe:2.3:a:checkmk:checkmk:2.3.0:p8:*:*:*:*:*:* cpe:2.3:a:checkmk:checkmk:2.3.0:p9:*:*:*:*:*:* cpe:2.3:a:checkmk:checkmk:2.4.0:-:*:*:*:*:*:* cpe:2.3:a:checkmk:checkmk:2.4.0:p1:*:*:*:*:*:* cpe:2.3:a:checkmk:checkmk:2.4.0:p10:*:*:*:*:*:* cpe:2.3:a:checkmk:checkmk:2.4.0:p11:*:*:*:*:*:* cpe:2.3:a:checkmk:checkmk:2.4.0:p12:*:*:*:*:*:* cpe:2.3:a:checkmk:checkmk:2.4.0:p2:*:*:*:*:*:* cpe:2.3:a:checkmk:checkmk:2.4.0:p3:*:*:*:*:*:* cpe:2.3:a:checkmk:checkmk:2.4.0:p4:*:*:*:*:*:* cpe:2.3:a:checkmk:checkmk:2.4.0:p5:*:*:*:*:*:* cpe:2.3:a:checkmk:checkmk:2.4.0:p6:*:*:*:*:*:* cpe:2.3:a:checkmk:checkmk:2.4.0:p7:*:*:*:*:*:* cpe:2.3:a:checkmk:checkmk:2.4.0:p8:*:*:*:*:*:* cpe:2.3:a:checkmk:checkmk:2.4.0:p9:*:*:*:*:*:* Remediation No remediation found in references.
Change History 4 change records found show changes